Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 12:58:48.023 00:00:10.361 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:58:48.023 00:00:10.362 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:59:12.479 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6870 1 2025-09-14 12:59:12.478 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6870 1 2025-09-14 12:59:48.423 00:00:10.365 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:59:48.424 00:00:10.365 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:00:12.698 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43154 10 6870 1 2025-09-14 13:00:12.699 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43154 10 6870 1 2025-09-14 12:56:28.319 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:00:48.828 00:00:10.359 TCP 23.104.0.1:44284 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:00:48.828 00:00:10.360 TCP 23.104.0.1:44284 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:01:12.873 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6870 1 2025-09-14 13:01:12.872 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6870 1 2025-09-14 12:57:28.322 00:05:00.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 12:57:28.322 00:05:00.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:01:49.228 00:00:10.367 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:01:49.228 00:00:10.367 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:02:13.093 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6870 1 2025-09-14 13:02:13.092 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6870 1 2025-09-14 13:02:49.632 00:00:10.364 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:03:02.569 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:02:49.633 00:00:10.363 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:03:02.516 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:03:02.517 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:03:02.570 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:03:13.305 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6870 1 2025-09-14 13:03:13.305 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6870 1 2025-09-14 12:59:28.321 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:03:50.037 00:00:11.112 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:03:50.035 00:00:11.113 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:04:13.529 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34766 10 6870 1 2025-09-14 13:04:13.528 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34766 10 6870 1 2025-09-14 13:04:51.187 00:00:10.368 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:04:51.187 00:00:10.368 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:05:13.744 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6870 1 2025-09-14 13:05:13.744 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6870 1 2025-09-14 13:05:51.594 00:00:10.363 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:05:51.593 00:00:10.363 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:06:13.955 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50554 10 6870 1 2025-09-14 13:06:13.955 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50554 10 6870 1 2025-09-14 13:02:28.320 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:06:51.990 00:00:10.370 TCP 23.104.0.1:45306 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:06:51.990 00:00:10.370 TCP 23.104.0.1:45306 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:07:14.191 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6870 1 2025-09-14 13:07:14.192 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6870 1 2025-09-14 13:03:28.324 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:03:28.324 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:08:02.349 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:08:02.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:07:52.397 00:00:10.365 TCP 23.104.0.1:41270 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:07:52.397 00:00:10.365 TCP 23.104.0.1:41270 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:08:02.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:08:02.349 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:08:14.469 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6870 1 2025-09-14 13:08:14.470 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6870 1 2025-09-14 13:08:52.802 00:00:10.365 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:08:52.801 00:00:10.365 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:09:14.685 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6870 1 2025-09-14 13:09:14.685 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6870 1 2025-09-14 13:05:28.321 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:09:53.203 00:00:10.360 TCP 23.104.0.1:54880 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:09:53.204 00:00:10.360 TCP 23.104.0.1:54880 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:10:14.931 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6870 1 2025-09-14 13:10:14.931 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6870 1 2025-09-14 13:10:53.606 00:00:10.362 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:10:53.607 00:00:10.361 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:11:15.176 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58912 10 6870 1 2025-09-14 13:11:15.176 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58912 10 6870 1 2025-09-14 13:11:54.011 00:00:10.376 TCP 23.104.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:11:54.013 00:00:10.374 TCP 23.104.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:12:15.407 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6870 1 2025-09-14 13:12:15.408 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6870 1 2025-09-14 13:08:28.321 00:05:00.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:13:02.520 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:13:02.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:12:54.423 00:00:10.369 TCP 23.104.0.1:32830 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:13:02.520 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:13:02.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:12:54.423 00:00:10.368 TCP 23.104.0.1:32830 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:13:15.633 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6870 1 2025-09-14 13:09:28.324 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:13:15.632 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6870 1 2025-09-14 13:09:28.325 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:13:54.828 00:00:10.360 TCP 23.104.0.1:53464 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:13:54.828 00:00:10.360 TCP 23.104.0.1:53464 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:14:15.845 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6870 1 2025-09-14 13:14:15.845 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6870 1 2025-09-14 13:14:55.226 00:00:10.367 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:14:55.225 00:00:10.368 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:15:16.091 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6870 1 2025-09-14 13:11:28.322 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:15:16.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6870 1 2025-09-14 13:15:55.629 00:00:10.360 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:15:55.629 00:00:10.359 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:16:16.304 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6870 1 2025-09-14 13:16:16.304 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6870 1 2025-09-14 13:16:56.030 00:00:10.368 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:16:56.030 00:00:10.369 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:17:16.524 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60676 10 6870 1 2025-09-14 13:17:16.524 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60676 10 6870 1 2025-09-14 13:18:02.708 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:18:02.646 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:18:02.709 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:18:02.647 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:17:56.431 00:00:10.364 TCP 23.104.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:17:56.431 00:00:10.363 TCP 23.104.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:18:16.749 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33568 10 6870 1 2025-09-14 13:14:28.323 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:18:16.749 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33568 10 6870 1 2025-09-14 13:18:56.842 00:00:10.347 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:18:56.842 00:00:10.346 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:15:28.325 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:19:16.969 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6870 1 2025-09-14 13:15:28.326 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:19:16.970 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6870 1 2025-09-14 13:19:57.229 00:00:10.366 TCP 23.104.0.1:60678 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:19:57.229 00:00:10.367 TCP 23.104.0.1:60678 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:20:17.207 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6870 1 2025-09-14 13:20:17.207 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6870 1 2025-09-14 13:20:57.635 00:00:10.330 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:20:57.636 00:00:10.330 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:17:28.327 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:21:17.424 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6870 1 2025-09-14 13:21:17.424 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6870 1 2025-09-14 13:21:58.025 00:00:10.367 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:21:58.025 00:00:10.367 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:22:17.645 00:00:16.707 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6870 1 2025-09-14 13:22:17.644 00:00:16.707 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6870 1 2025-09-14 13:23:02.961 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:23:02.976 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:23:02.977 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:22:58.427 00:00:10.327 TCP 23.104.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:23:02.962 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:22:58.427 00:00:10.328 TCP 23.104.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:23:24.394 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6870 1 2025-09-14 13:23:24.394 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6870 1 2025-09-14 13:23:58.795 00:00:10.369 TCP 23.104.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:23:58.796 00:00:10.369 TCP 23.104.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:20:28.327 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:24:24.627 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6870 1 2025-09-14 13:24:24.627 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6870 1 2025-09-14 13:24:59.204 00:00:10.373 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:24:59.204 00:00:10.373 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:21:28.331 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:21:28.331 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:25:24.845 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37846 10 6870 1 2025-09-14 13:25:24.844 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37846 10 6870 1 2025-09-14 13:25:59.618 00:00:10.364 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:25:59.618 00:00:10.364 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:26:25.089 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6870 1 2025-09-14 13:26:25.089 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6870 1 2025-09-14 13:27:00.017 00:00:10.562 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:27:00.018 00:00:10.562 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:23:28.327 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:27:25.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6870 1 2025-09-14 13:27:25.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6870 1 2025-09-14 13:28:03.015 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:28:02.966 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:28:02.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:28:03.015 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:28:00.613 00:00:10.365 TCP 23.104.0.1:39288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:28:00.614 00:00:10.365 TCP 23.104.0.1:39288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:28:25.523 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56880 10 6870 1 2025-09-14 13:28:25.521 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56880 10 6870 1 2025-09-14 13:29:01.017 00:00:10.362 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:29:01.017 00:00:10.362 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:29:25.748 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44276 10 6870 1 2025-09-14 13:29:25.748 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44276 10 6870 1 2025-09-14 13:30:01.419 00:00:10.366 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:30:01.419 00:00:10.366 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:26:28.330 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:30:25.967 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6870 1 2025-09-14 13:30:25.968 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6870 1 2025-09-14 13:31:01.826 00:00:10.322 TCP 23.104.0.1:54572 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:31:01.827 00:00:10.322 TCP 23.104.0.1:54572 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:27:28.332 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:27:28.333 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:31:26.199 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56964 10 6870 1 2025-09-14 13:31:26.199 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56964 10 6870 1 2025-09-14 13:32:02.187 00:00:10.361 TCP 23.104.0.1:33884 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:32:02.187 00:00:10.361 TCP 23.104.0.1:33884 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:32:26.415 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49368 10 6870 1 2025-09-14 13:32:26.415 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49368 10 6870 1 2025-09-14 13:33:02.828 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:33:03.096 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:33:02.828 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:33:03.096 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:33:02.588 00:00:10.368 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:33:02.588 00:00:10.368 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:29:28.330 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:33:26.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45532 10 6870 1 2025-09-14 13:33:26.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45532 10 6870 1 2025-09-14 13:34:02.988 00:00:10.374 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:34:02.989 00:00:10.374 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:34:26.853 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6870 1 2025-09-14 13:34:26.853 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6870 1 2025-09-14 13:35:03.401 00:00:10.361 TCP 23.104.0.1:45406 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:35:03.400 00:00:10.361 TCP 23.104.0.1:45406 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:35:27.109 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6870 1 2025-09-14 13:35:27.109 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6870 1 2025-09-14 13:36:03.803 00:00:10.368 TCP 23.104.0.1:33410 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:36:03.803 00:00:10.368 TCP 23.104.0.1:33410 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:32:28.330 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:36:27.334 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6870 1 2025-09-14 13:36:27.333 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6870 1 2025-09-14 13:37:04.210 00:00:10.367 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:37:04.210 00:00:10.367 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:33:28.334 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:33:28.333 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:37:27.548 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34024 10 6870 1 2025-09-14 13:37:27.548 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34024 10 6870 1 2025-09-14 13:38:03.222 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:38:03.062 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:38:03.062 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:38:03.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:38:04.614 00:00:10.324 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:38:04.614 00:00:10.324 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:38:27.773 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6870 1 2025-09-14 13:38:27.774 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6870 1 2025-09-14 13:39:04.975 00:00:10.367 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:39:04.976 00:00:10.366 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:35:28.337 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:39:28.021 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48154 10 6870 1 2025-09-14 13:39:28.021 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48154 10 6870 1 2025-09-14 13:40:05.381 00:00:10.366 TCP 23.104.0.1:60074 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:40:05.381 00:00:10.366 TCP 23.104.0.1:60074 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:40:28.235 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43486 10 6870 1 2025-09-14 13:40:28.236 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43486 10 6870 1 2025-09-14 13:41:05.787 00:00:10.370 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:41:05.787 00:00:10.370 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:41:28.453 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59306 10 6870 1 2025-09-14 13:41:28.452 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59306 10 6870 1 2025-09-14 13:42:06.209 00:00:10.361 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:42:06.209 00:00:10.361 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:38:28.336 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:42:28.666 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36118 10 6870 1 2025-09-14 13:42:28.666 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36118 10 6870 1 2025-09-14 13:43:03.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:43:03.330 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:43:03.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:43:03.330 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:43:06.608 00:00:10.369 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:43:06.608 00:00:10.369 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:39:28.338 00:05:00.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:39:28.338 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:43:28.878 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6870 1 2025-09-14 13:43:28.877 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6870 1 2025-09-14 13:44:07.012 00:00:10.367 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:44:07.013 00:00:10.366 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:44:29.108 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6870 1 2025-09-14 13:44:29.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6870 1 2025-09-14 13:45:07.418 00:00:10.368 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:45:07.417 00:00:10.368 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:41:28.335 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:45:29.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6870 1 2025-09-14 13:45:29.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6870 1 2025-09-14 13:46:07.830 00:00:10.431 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:46:07.830 00:00:10.432 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:46:29.535 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6870 1 2025-09-14 13:46:29.536 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6870 1 2025-09-14 13:47:08.297 00:00:10.369 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:47:08.295 00:00:10.370 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:47:29.753 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6870 1 2025-09-14 13:47:29.752 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6870 1 2025-09-14 13:48:03.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:48:03.114 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:48:03.114 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:48:03.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:48:08.710 00:00:10.385 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:48:08.710 00:00:10.385 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:44:28.337 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:48:29.963 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44684 12 6974 1 2025-09-14 13:48:29.964 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44684 12 6974 1 2025-09-14 13:49:09.141 00:00:10.365 TCP 23.104.0.1:50436 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:49:09.141 00:00:10.366 TCP 23.104.0.1:50436 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:45:28.339 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:45:28.339 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:49:30.194 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49044 10 6870 1 2025-09-14 13:49:30.195 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49044 10 6870 1 2025-09-14 13:50:09.546 00:00:10.364 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:50:09.544 00:00:10.364 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:50:30.407 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6870 1 2025-09-14 13:50:30.407 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6870 1 2025-09-14 13:51:09.949 00:00:10.366 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:51:09.949 00:00:10.366 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:47:28.338 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:51:30.627 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38134 10 6870 1 2025-09-14 13:51:30.626 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38134 10 6870 1 2025-09-14 13:52:10.355 00:00:10.367 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:52:10.355 00:00:10.367 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:52:30.841 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 10 6870 1 2025-09-14 13:52:30.842 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 10 6870 1 2025-09-14 13:53:03.252 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:53:03.389 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:53:03.252 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:53:03.389 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:53:10.757 00:00:10.384 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:53:10.757 00:00:10.384 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:53:31.079 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 10 6870 1 2025-09-14 13:53:31.079 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 10 6870 1 2025-09-14 13:54:11.179 00:00:11.017 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:54:11.178 00:00:11.018 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:50:28.341 00:05:00.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:54:31.288 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38854 10 6870 1 2025-09-14 13:54:31.288 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38854 10 6870 1 2025-09-14 13:55:12.232 00:00:10.364 TCP 23.104.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:55:12.233 00:00:10.364 TCP 23.104.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:51:28.342 00:05:00.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:51:28.343 00:05:00.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:55:31.495 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6870 1 2025-09-14 13:55:31.495 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6870 1 2025-09-14 13:56:12.636 00:00:10.368 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:56:12.638 00:00:10.367 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:56:31.705 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6870 1 2025-09-14 13:56:31.705 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6870 1 2025-09-14 13:57:13.046 00:00:10.367 TCP 23.104.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:57:13.047 00:00:10.367 TCP 23.104.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:53:28.342 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:57:31.882 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49136 10 6870 1 2025-09-14 13:57:31.882 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49136 10 6870 1 2025-09-14 13:58:03.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:58:03.375 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:58:03.374 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:58:03.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:58:13.449 00:00:10.737 TCP 23.104.0.1:40340 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:58:13.450 00:00:10.737 TCP 23.104.0.1:40340 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:58:32.083 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6870 1 2025-09-14 13:58:32.082 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6870 1 Summary: total flows: 328, total bytes: 1.0 M, total packets: 3148, avg bps: 2243, avg pps: 0, avg bpp: 332 Time window: 2025-09-14 12:56:28 - 2025-09-14 13:58:42 Total flows processed: 328, passed: 328, Blocks skipped: 0, Bytes read: 34176 Sys: 0.0055s User: 0.0055s Wall: 0.0105s flows/second: 31294.4 Runtime: 0.0105s